Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/MO8Rjzb0fjfSzeItvO-dgEWnDOI.roa
File:                     MO8Rjzb0fjfSzeItvO-dgEWnDOI.roa (raw, json)
Hash identifier:          EhncrWjTq9FHjvWfj7SJhwqeHliyfXlJ56q7FGmJPQY=
Subject key identifier:   30:EF:11:8F:36:F4:7E:37:D2:CD:E2:2D:BC:EF:9D:80:45:A7:0C:E2
Certificate issuer:       /CN=a036af22669183ba26f23976530e349b34651968
Certificate serial:       018572A805B23252E47F8D47168A1DD2A93F
Authority key identifier: A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/MO8Rjzb0fjfSzeItvO-dgEWnDOI.roa
Signing time:             Mon 02 Jan 2023 13:24:52 +0000
ROA not before:           Mon 02 Jan 2023 13:24:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199757
IP address blocks:        185.39.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:a8:05:b2:32:52:e4:7f:8d:47:16:8a:1d:d2:a9:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a036af22669183ba26f23976530e349b34651968
        Validity
            Not Before: Jan  2 13:24:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=30ef118f36f47e37d2cde22dbcef9d8045a70ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a0:e3:67:11:8b:5c:ad:e2:5c:c3:7b:0c:83:
                    76:55:9f:91:8e:58:f3:be:d3:0c:09:85:f0:ae:d6:
                    81:d0:4b:30:f1:3a:fe:03:d3:c2:66:75:0d:df:ed:
                    56:18:fa:62:5f:93:35:80:b7:09:31:71:ae:e4:77:
                    62:84:c1:dc:56:fd:20:91:b4:4c:da:3b:75:5e:e2:
                    a3:9b:dd:55:82:0b:a1:f5:35:f7:a1:ed:fa:af:63:
                    91:d0:3b:bc:cf:28:11:fd:00:2b:6a:7e:bf:8e:97:
                    34:30:77:0e:07:c9:cb:ba:0d:e6:8c:cf:f1:85:fc:
                    a0:4c:9f:60:dc:55:de:b4:8f:a1:d8:a6:31:76:d3:
                    a6:d5:6c:84:d8:75:9f:8f:3c:eb:4a:cf:bf:a3:94:
                    c0:5b:6c:35:88:79:de:02:a3:52:44:9e:91:cb:2a:
                    c3:3c:90:a7:b6:d2:75:99:ad:55:8d:3a:48:b0:c5:
                    0c:b1:04:37:76:dd:cb:60:d5:f9:d7:34:5c:8b:c3:
                    e5:34:1c:e6:a5:ef:e5:8f:d9:dc:f5:d2:c8:e9:df:
                    f1:03:57:03:49:2c:6e:6f:25:f3:90:a5:99:a5:94:
                    b1:82:9f:75:67:38:d5:f5:22:2e:ae:b4:5d:9a:05:
                    3e:e3:90:c0:55:11:14:44:48:ef:f1:60:0f:ec:36:
                    76:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EF:11:8F:36:F4:7E:37:D2:CD:E2:2D:BC:EF:9D:80:45:A7:0C:E2
            X509v3 Authority Key Identifier:
                keyid:A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/MO8Rjzb0fjfSzeItvO-dgEWnDOI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.39.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:ae:b3:5d:41:91:6b:8f:54:2e:6c:5e:57:c7:ba:91:af:54:
         42:4a:64:04:04:b6:c8:5b:a2:8b:3f:f9:84:14:56:f2:2c:41:
         ba:41:11:b5:9b:93:01:46:3d:bb:f2:ac:f9:db:a5:63:ab:e3:
         1c:98:20:2c:52:15:40:6b:f9:63:aa:a8:19:c7:c1:68:84:87:
         43:db:12:0e:5d:1b:aa:64:95:5d:4c:90:9d:b7:9c:a5:23:c8:
         af:a7:9e:cb:a6:a8:1c:fa:0c:d8:fc:e5:7f:ff:07:ff:48:63:
         21:11:89:1e:7e:09:89:9c:50:8a:98:28:0f:b5:7c:4d:b1:27:
         4e:69:ef:0f:6b:06:11:8d:6f:52:1a:21:34:93:aa:b1:79:b1:
         7e:f3:6a:57:ca:54:6d:c7:1b:f3:18:07:ba:36:12:2d:c7:07:
         28:0f:a4:5a:40:90:e7:6f:d9:ca:fc:12:21:0b:a9:aa:e8:3d:
         7f:11:cf:20:47:96:4d:37:36:7e:85:4c:08:87:c7:86:ff:27:
         98:1f:ca:e9:a5:dc:8e:f7:23:f3:df:a3:6c:31:a2:f2:f2:05:
         4b:53:e6:6e:ef:e4:e5:11:f6:86:4c:c1:77:f2:5f:f7:74:42:
         08:d7:39:d9:5c:8b:25:91:16:c5:16:ae:6f:2a:24:26:69:13:
         2d:ba:b1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:45 2024 by rpki-client on console-ams.rpki-client.org